CVE-2017-17957

Critical

Published: 28/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the fid parameter in my_wishlist.php.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or modification.

It is recommended to update the software to the latest version and implement input validation to mitigate the risk of SQL injection.

Original NVD description (English source)

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.